Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Mar 2016 22:31:29 +0000 (UTC)
From:      Mark Felder <feld@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r409967 - head/security/openssl
Message-ID:  <201603022231.u22MVTgi079120@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: feld
Date: Wed Mar  2 22:31:29 2016
New Revision: 409967
URL: https://svnweb.freebsd.org/changeset/ports/409967

Log:
  security/openssl: Disable SSLv2 and MD2
  
  SSLv2 is being disabled due to DROWN.
  
  MD2 is being disabled as it should not have been enabled by default.
  This was disabled by upstream back in 2009.
  
  PR:		195796
  Approved by:	delphij, eadler
  Security:	CVE-2009-2409
  Security:	CVE-2016-0800

Modified:
  head/security/openssl/Makefile

Modified: head/security/openssl/Makefile
==============================================================================
--- head/security/openssl/Makefile	Wed Mar  2 22:29:07 2016	(r409966)
+++ head/security/openssl/Makefile	Wed Mar  2 22:31:29 2016	(r409967)
@@ -4,7 +4,7 @@
 PORTNAME=	openssl
 PORTVERSION=	1.0.2
 DISTVERSIONSUFFIX=	g
-PORTREVISION=	9
+PORTREVISION=	10
 CATEGORIES=	security devel
 MASTER_SITES=	http://www.openssl.org/source/ \
 		ftp://ftp.openssl.org/source/ \
@@ -23,7 +23,7 @@ LICENSE=	OpenSSL
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 OPTIONS_DEFINE=	SHARED THREADS I386 SSE2 ASM PADLOCK ZLIB GMP SCTP SSL2 SSL3 RFC3779 MD2 RC5 EXPCIPHERS DOCS MAN3
-OPTIONS_DEFAULT=SHARED THREADS SSE2 SCTP SSL2 SSL3 MD2 MAN3
+OPTIONS_DEFAULT=SHARED THREADS SSE2 SCTP SSL3 MAN3
 .for a in amd64 ia64
 OPTIONS_DEFINE_${a}=	EC
 OPTIONS_DEFAULT_${a}=	EC



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201603022231.u22MVTgi079120>